802.1X on switch 2950

Question

Hi,
I tried to configure 802.1X on a 2950 switch, i can't connect from a pc.
That's what i did on:
* ACS
aaa client ip IP_Switch
authenticate : radius (ietf)
key : xxxxx
a certificate has been created on a ca server and installed on the acs (on same machine, i choose "use certificate from storage")
* WIN XP
Type EAP : PEAP
Secured password : EAP-MSCHAP V2
* SWITCH
aaa authentication dot1x default group radius
interface fastethernet0/1
switchport mode access
dot1x port-control auto
radius-server host IP_ACS auth-port 1645 key xxxxx
I created user (same as used for logging on the client) on ACS, i always get "authentication failed"

Answer 1

Hello stephen,
Is the IP communication between the switch and the radius server fine ? Is the radius server on a seperate segment ? Once u have this setup, u just need to define the username/password on the radius server and see if authenticates thro the switch. do a debug aaa authentication, debug dot1x events/packets etc to see what happens when the user logs in !!!
configs:
aaa new-model
aaa authentication dot1x default group radius local
dot1x system-auth-control
dot1x guest-vlan supplicant
interface FastEthernet1/0/47
switchport access vlan 777
switchport mode access
dot1x port-control auto
dot1x timeout tx-period 15
dot1x guest-vlan 10
dot1x reauthentication
spanning-tree portfast
ip dhcp snooping trust
If authentication phase passes, the user will be put in VLAN 777. if there is any guest plugging into this PC, without a dot1x client, he will be put on guest vlan 10..
Hope this helps.. all the best. rate replies if found useful..
Raj